Privacy Policy

1. Data We Collect

We collect limited technical and usage data when you use the site:

• IP address and region (e.g., country or city)
• Device and browser type
• Pages visited, visit duration, and interaction patterns

This data is used only to monitor usage, troubleshoot issues, and optimise the site.

2. How We Collect It

We use:

• Cloudflare Analytics to monitor performance and security
• Google Analytics to understand general traffic trends

These services collect and store anonymised data. While IP addresses are recorded, we do not attempt to associate them with individual users.

3. What We Do Not Collect

We do not:

• Require user accounts or logins
• Collect data for advertising, behavioural profiling, or third-party tracking
• Store user-submitted files or persistent cookies for marketing purposes

3.1 Analytics & Website Performance

We use analytics services to understand how users interact with our website and to improve performance:

• Vargr Analytics: A self-hosted Umami instance at analytics.vargr.cc that tracks basic, anonymized stats like page views and session length. No cookies, no personal data.
• Cloudflare Analytics: Used for monitoring website performance, security threats, and general traffic patterns.
• Google Analytics: May be used to track user behavior and site performance for optimization purposes.

All analytics data is aggregated and anonymized. No personally identifiable information is collected or stored through these services.

4. Local Storage Usage

Your personal progress and preferences (e.g., viewed papers, filters) are saved using the localStorage feature of your browser. This data remains on your device and is never transmitted to our servers.

5. Contact Form Submissions

An optional contact form is available on the site for feedback and support queries. This form is hosted using Google Forms. Any information submitted is stored securely by Google and accessible only to the site administrator. Users may choose whether to include their email address. No data submitted via the form is used for marketing or shared with third parties.

6. API Privacy

A dedicated API at api-nzqa.toasting.me has been developed specifically for nzqa.toasting.me and the website depends on it for core functionality. All API requests are logged including IP addresses, timestamps, user agents, and request patterns. These logs are retained indefinitely for security monitoring, abuse detection, and operational analysis. Unauthorized or excessive API usage may result in permanent IP blocking and potential legal action.

7. Data Retention & Security

Analytics data may be retained by Google, Cloudflare, and Vargr Analytics according to their respective privacy policies. This site is served over HTTPS to ensure secure data transmission. No personally identifiable data is stored or processed by the site operator.

8. External Links and Embedded Resources

Any links to external content, such as the official NZQA website, are provided for convenience. We are not responsible for the privacy practices or content of those third-party sites.

9. Contact

For any privacy-related concerns or questions, please contact the site operator at support[at]nzqa.toasting.me.